GCVE - cpe:2.3:a:archerydms:archery:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:archerydms:archery:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Archerydms (`bfbb2000-69d6-50c6-9af7-edcfef4880c4`)
Product	Archery (`6fdedc98-0b2c-5e8a-9b91-5cce4aa3ae0a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:docker/hhyo/archery`	purl2cpe	2026-06-01 10:12:59.922375
`pkg:github/hhyo/archery`	purl2cpe	2026-06-01 10:12:59.922377

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-38542`	vulnerable	2026-06-08 05:47:16.601892	Details available Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the ThreadIDs parameter in the kill_session interface. The project has released an update, please upgrade to v1.9.0 and above. Published: 2022-09-13T14:45:22.000Z Updated: 2024-08-03T10:54:03.671Z Open on db.gcve.eu Reference links https://github.com/hhyo/Archery/blob/v1.8.5/sql/urls.py#L149 https://announcements.bybit.com/en-US/article/bybit-improves-the-security-of-the-open-source-community-blt626818c0ee8c48a6/ https://github.com/hhyo/Archery/issues/1841	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-38541`	vulnerable	2026-06-08 05:47:16.601602	Details available Archery v1.8.3 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the start_time and stop_time parameters in the my2sql interface. Published: 2022-09-13T00:00:00.000Z Updated: 2024-08-03T10:54:04.050Z Open on db.gcve.eu Reference links https://github.com/hhyo/Archery/blob/v1.8.5/sql/urls.py#L136 https://github.com/hhyo/Archery/issues/1842 https://announcements.bybit.com/en-US/article/bybit-improves-the-security-of-the-open-source-community-blt626818c0ee8c48a6/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-38540`	vulnerable	2026-06-08 05:47:16.601211	Details available Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the ThreadIDs parameter in the create_kill_session interface. Published: 2022-09-13T00:00:00.000Z Updated: 2024-08-03T10:54:04.001Z Open on db.gcve.eu Reference links https://github.com/hhyo/Archery/blob/v1.8.5/sql/urls.py#L148 https://announcements.bybit.com/en-US/article/bybit-improves-the-security-of-the-open-source-community-blt626818c0ee8c48a6/ https://github.com/hhyo/Archery/issues/1841	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-38539`	vulnerable	2026-06-08 05:47:16.600833	Details available Archery v1.7.5 to v1.8.5 was discovered to contain a SQL injection vulnerability via the where parameter at /archive/apply. Published: 2022-09-13T14:45:19.000Z Updated: 2024-08-03T10:54:03.885Z Open on db.gcve.eu Reference links https://github.com/hhyo/Archery/blob/v1.8.5/sql/urls.py#L155 https://github.com/hhyo/Archery/issues/1842 https://announcements.bybit.com/en-US/article/bybit-improves-the-security-of-the-open-source-community-blt626818c0ee8c48a6/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-38538`	vulnerable	2026-06-08 05:47:16.600394	Details available Archery v1.7.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the checksum parameter in the report module. Published: 2022-09-13T00:00:00.000Z Updated: 2024-08-03T10:54:04.003Z Open on db.gcve.eu Reference links https://github.com/hhyo/Archery/blob/v1.8.5/sql/urls.py#L145 https://announcements.bybit.com/en-US/article/bybit-improves-the-security-of-the-open-source-community-blt626818c0ee8c48a6/ https://github.com/hhyo/Archery/issues/1841	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-38537`	vulnerable	2026-06-08 05:47:16.599835	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.